You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by Andrii Tkach <at...@hortonworks.com> on 2014/11/13 14:53:01 UTC

Review Request 27988: Perm 400 for spnego keytab, unable to start webhcat

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/27988/
-----------------------------------------------------------

Review request for Ambari, Andriy Babiichuk, Aleksandr Kovalenko, and Yusaku Sako.


Bugs: AMBARI-8307
    https://issues.apache.org/jira/browse/AMBARI-8307


Repository: ambari


Description
-------

We have a permissions issue on the /etc/security/keytabs/spnego.service.keytab when running /var/lib/ambari-server/resources/scripts/(kerberos-setup.sh|keytabs.sh).
I have my Storm DRPC, Nimbus, and UI servers on the same host as my Hive components. The spnego.service.keytab is 400 when it should be 440:
[hcat@revo2 webhcat]$ stat /etc/security/keytabs/spnego.service.keytab 
  File: `/etc/security/keytabs/spnego.service.keytab'
  Size: 4594      Blocks: 16         IO Block: 4096   regular file
Device: fd00h/64768d	Inode: 538521      Links: 1
Access: (0400/-r--------)  Uid: (  507/   storm)   Gid: (  500/  hadoop)
Access: 2014-11-11 11:40:00.626724368 -0600
Modify: 2014-11-11 09:19:39.000000000 -0600
Change: 2014-11-11 09:21:58.773876115 -0600
After changing it manually to 440 I can start WebHCat.


Diffs
-----

  ambari-web/app/controllers/main/admin/security/add/step3.js 32d3edc 
  ambari-web/app/data/HDP2/secure_properties.js 77cfc9a 
  ambari-web/app/messages.js af1523b 

Diff: https://reviews.apache.org/r/27988/diff/


Testing
-------

Tested manually


Thanks,

Andrii Tkach


Re: Review Request 27988: Perm 400 for spnego keytab, unable to start webhcat

Posted by Aleksandr Kovalenko <ak...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/27988/#review61255
-----------------------------------------------------------

Ship it!


Ship It!

- Aleksandr Kovalenko


On Лис. 13, 2014, 1:53 після полудня, Andrii Tkach wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/27988/
> -----------------------------------------------------------
> 
> (Updated Лис. 13, 2014, 1:53 після полудня)
> 
> 
> Review request for Ambari, Andriy Babiichuk, Aleksandr Kovalenko, and Yusaku Sako.
> 
> 
> Bugs: AMBARI-8307
>     https://issues.apache.org/jira/browse/AMBARI-8307
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> We have a permissions issue on the /etc/security/keytabs/spnego.service.keytab when running /var/lib/ambari-server/resources/scripts/(kerberos-setup.sh|keytabs.sh).
> I have my Storm DRPC, Nimbus, and UI servers on the same host as my Hive components. The spnego.service.keytab is 400 when it should be 440:
> [hcat@revo2 webhcat]$ stat /etc/security/keytabs/spnego.service.keytab 
>   File: `/etc/security/keytabs/spnego.service.keytab'
>   Size: 4594      Blocks: 16         IO Block: 4096   regular file
> Device: fd00h/64768d	Inode: 538521      Links: 1
> Access: (0400/-r--------)  Uid: (  507/   storm)   Gid: (  500/  hadoop)
> Access: 2014-11-11 11:40:00.626724368 -0600
> Modify: 2014-11-11 09:19:39.000000000 -0600
> Change: 2014-11-11 09:21:58.773876115 -0600
> After changing it manually to 440 I can start WebHCat.
> 
> 
> Diffs
> -----
> 
>   ambari-web/app/controllers/main/admin/security/add/step3.js 32d3edc 
>   ambari-web/app/data/HDP2/secure_properties.js 77cfc9a 
>   ambari-web/app/messages.js af1523b 
> 
> Diff: https://reviews.apache.org/r/27988/diff/
> 
> 
> Testing
> -------
> 
> Tested manually
> 
> 
> Thanks,
> 
> Andrii Tkach
> 
>


Re: Review Request 27988: Perm 400 for spnego keytab, unable to start webhcat

Posted by Andriy Babiichuk <ab...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/27988/#review61256
-----------------------------------------------------------

Ship it!


Ship It!

- Andriy Babiichuk


On Ноя. 13, 2014, 1:53 п.п., Andrii Tkach wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/27988/
> -----------------------------------------------------------
> 
> (Updated Ноя. 13, 2014, 1:53 п.п.)
> 
> 
> Review request for Ambari, Andriy Babiichuk, Aleksandr Kovalenko, and Yusaku Sako.
> 
> 
> Bugs: AMBARI-8307
>     https://issues.apache.org/jira/browse/AMBARI-8307
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> We have a permissions issue on the /etc/security/keytabs/spnego.service.keytab when running /var/lib/ambari-server/resources/scripts/(kerberos-setup.sh|keytabs.sh).
> I have my Storm DRPC, Nimbus, and UI servers on the same host as my Hive components. The spnego.service.keytab is 400 when it should be 440:
> [hcat@revo2 webhcat]$ stat /etc/security/keytabs/spnego.service.keytab 
>   File: `/etc/security/keytabs/spnego.service.keytab'
>   Size: 4594      Blocks: 16         IO Block: 4096   regular file
> Device: fd00h/64768d	Inode: 538521      Links: 1
> Access: (0400/-r--------)  Uid: (  507/   storm)   Gid: (  500/  hadoop)
> Access: 2014-11-11 11:40:00.626724368 -0600
> Modify: 2014-11-11 09:19:39.000000000 -0600
> Change: 2014-11-11 09:21:58.773876115 -0600
> After changing it manually to 440 I can start WebHCat.
> 
> 
> Diffs
> -----
> 
>   ambari-web/app/controllers/main/admin/security/add/step3.js 32d3edc 
>   ambari-web/app/data/HDP2/secure_properties.js 77cfc9a 
>   ambari-web/app/messages.js af1523b 
> 
> Diff: https://reviews.apache.org/r/27988/diff/
> 
> 
> Testing
> -------
> 
> Tested manually
> 
> 
> Thanks,
> 
> Andrii Tkach
> 
>